Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
File:                     8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json)
Hash identifier:          CUmkfeE3nU6PZiWq6Vmj8PaUTDvuVrFLd0Q0qLzjTLQ=
Subject key identifier:   6F:86:AF:A9:64:3D:C7:A8:E8:7A:A2:85:73:E0:1F:41:CE:1B:06:81
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Certificate issuer:       /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
Manifest number:          014A
Signing time:             Wed 11 Jun 2025 03:42:22 +0000
Manifest this update:     Wed 11 Jun 2025 03:42:22 +0000
Manifest next update:     Wed 18 Jun 2025 03:42:22 +0000
Files and hashes:         1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: ey+5KhBNHBLhIb8fWkzIJHyscMqldbj7JaafVLXk3KY=)
                          2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=)
                          3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
                          rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 03:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
        Validity
            Not Before: Jun 11 03:42:22 2025 GMT
            Not After : Jun 18 03:42:22 2025 GMT
        Subject: CN=6848fb1e-2d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:98:26:dc:03:cb:9f:68:e8:6d:29:5a:1c:
                    7b:65:9e:67:85:17:d6:a0:4b:1d:19:54:5d:7e:b5:
                    d1:57:6b:f6:0e:b1:2d:de:b6:b1:e0:2b:a9:62:b9:
                    e8:68:37:28:c3:10:89:2c:8b:75:33:da:11:05:25:
                    26:4e:3c:fe:df:23:c4:82:28:22:1e:ff:e6:a4:4e:
                    97:12:27:5a:f2:0b:14:dd:98:f2:08:94:aa:43:19:
                    51:4c:0d:d1:93:7d:eb:d8:85:35:c8:38:02:01:54:
                    85:50:e1:fa:2b:db:ea:14:94:1a:56:ba:f4:b7:9c:
                    6e:a2:2d:22:60:5c:4f:1e:69:13:27:60:fb:7f:26:
                    89:61:a0:85:c3:1a:9c:0b:c6:e3:36:48:7b:df:c7:
                    7a:98:fd:25:24:80:51:bc:ad:b6:7e:73:47:d8:3c:
                    d2:2e:a2:2d:ae:d6:f4:f8:a4:62:b4:df:69:cc:c1:
                    f8:a4:d3:9d:3e:63:70:3c:4f:13:42:a9:41:3f:43:
                    f5:d9:12:43:a5:a6:6c:e5:c0:af:fb:bd:4b:3f:12:
                    0a:0e:57:e0:37:bc:ff:5c:c4:dc:b0:e5:8c:a1:53:
                    f5:9f:ea:f6:53:35:7a:d9:82:26:d6:6c:95:c2:41:
                    42:54:db:d2:90:0c:56:50:08:76:90:f7:e3:1d:a6:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:86:AF:A9:64:3D:C7:A8:E8:7A:A2:85:73:E0:1F:41:CE:1B:06:81
            X509v3 Authority Key Identifier:
                keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:4b:ce:42:af:7e:52:b3:00:1e:af:3a:39:18:e0:74:d8:
         34:5b:69:72:ab:3f:f6:81:92:41:73:b6:6f:3a:3c:22:a1:49:
         48:0d:96:d0:cd:5f:40:5d:be:98:2e:b2:fd:91:24:f2:26:49:
         d0:4a:cd:e5:d9:a8:e7:09:cf:ff:a1:49:1c:0b:a8:c6:fd:ec:
         11:ac:ef:a0:ad:26:0b:59:cf:98:e1:c9:b8:43:79:4d:1a:45:
         b4:9a:e6:7c:d4:3f:38:97:bb:e3:72:31:84:75:f8:89:2f:96:
         74:00:a7:d1:46:b5:7c:c0:50:02:53:0b:01:f2:2d:73:da:aa:
         75:ce:5b:2b:b6:89:c1:92:f8:75:1b:50:cb:6c:65:f4:d6:6b:
         a4:86:71:20:1d:73:ad:db:bd:3b:08:a0:4a:35:0e:48:32:2f:
         cb:dd:80:ac:ad:09:99:af:cb:00:b1:ad:08:4d:57:83:b4:cd:
         4d:f1:6d:45:06:58:c1:ba:f3:ee:aa:c4:4c:3f:78:8e:0a:aa:
         b8:38:c1:ec:79:ae:4b:42:10:7f:65:d2:1c:21:5b:80:06:6a:
         88:71:b9:2e:65:55:77:c9:1f:fb:98:42:a9:3f:ff:f5:6e:81:
         7b:54:33:c1:04:e2:54:3b:68:bf:4b:ab:8f:a2:01:51:95:f3:
         21:59:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:46:16 2025 by rpki-client